Rappy
-
Posts
20 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by Rappy
-
-
I've been running my machine for the last week or so with seemingly no issues.
I do, however, notice something different now, though. I can no longer right-click on applications in the taskbar to get app-specific context menus. IE: right-clicking on the Chrome icon should show a menu to "Open a new tab" "Open a new incognito window", etc. Instead, I get a generic menu that just shows "Unpin from taskbar" and "Close".
I used this specific menu option often as a quick way to open new windows quickly. I tried searching for a solution on the internet, but unfortunately, no suggestions have fixed this. Do you have any ideas what could have caused this or how to restore this feature?
-
I've uninstalled the 4 applicated listed and updated the ones in the list above that I actively use.
8 hours ago, AdvancedSetup said:Let me know how the computer is running now and if there are still any signs of infection or any other unresolved issues.
The problem with this is: my computer never showed any sign of infection other than recently accessed sites on my machine being compromised. I may not know anything is wrong until it happens to another login. As mentioned before, I use very strong passwords and most of my accounts are locked behind 2FA.
-
Here's the scan.
-
It might be a nice addition in the fixlog to automatically bookmark all open tabs before closing the browsers as a safeguard.
-
I wish the #2 point above was more precise. I assumed after running the fix that I would be able to "Restore" my open browser tabs as usual or at least re-open them via the browser history. I don't usually rely on bookmarks and keep tabs open to return to later and had over 70 tabs open from various sites and all that is now gone. :|
Anyways, here's the fixlog.txt.
-
-
Here's the two. Rebooting before running FRST.
-
The scan finished this time, and no threats were identified. Oddly, it stopped again on a different file (hal.dll) for over 3 minutes before continuing.
I decided to run the entire scan over to give you a combined log file of all scans and it stopped on a different file (kd.dll) for over 3 minutes before continuing. Bizarre behavior. All 3 files were about 2700-2900 files in.
-
I then decided to run all scans separately. Every one of them came back with no threats detected.
However, the Rootkits scan stopped on CLFS.SYS and would not proceed further.
-
I started it twice and it stopped early on (2500 files in). I started it a third time and it stopped again. I left it running all night and it never processed another file. It was stuck on C:\Windows\System32\drivers\CLFS.SYS all night.
-
-
7 hours ago, AdvancedSetup said:
- Have patience. The entire process may take a few hours or more.
Yeah, that took forever. Here are the results.
-
14 hours ago, AdvancedSetup said:
Thank you for the logs. What are these batch files doing?
Shortcut: C:\Users\Rappy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Axmud\Axmud (all users).lnk -> C:\Users\Rappy\AppData\Local\Axmud\strawberry\runaxmud.bat ()
Shortcut: C:\Users\Rappy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Axmud\Axmud (visually-impaired users).lnk -> C:\Users\Rappy\AppData\Local\Axmud\strawberry\blindaxmud.bat ()These were old installation files for installing Axmud with Strawberry Perl. However, they no longer work with the latest versions. https://axmud.sourceforge.io/share/docs/guide/ch02.html I've removed the whole Axmud directory as I haven't used Axmud in years.
14 hours ago, AdvancedSetup said:Restore Point creation is failing. Please see if you can manually fix that and create a NEW System Restore Point
Turn On or Off System Protection for Drives in Windows 11
Create System Restore Point in Windows 11
I was able to turn system restore off/on and create a restore point successfully.
And attached is the Kaspersky scan results.
-
I have done as you requested. Here's the logs.
-
I am aware of the failing SSD card. It is currently only connected to remove data from.
Looking at the contents of C:\Users\Rappy\PCAppStore, I would agree with you. However, uninstaller.exe is not present in that folder (yes, I have invis files shown in explorer).
I am not sure what you mean by your last comment. What do you mean by validating a driver? -
About a month ago, I got email replies that some accounts were compromised. Among those, Steam, Reddit, Twitch, YouTube, Amazon. I have since reset passwords and made further attempts to secure them (2FA, etc).
I have been using BitWarden for years and all the above accounts used 12-20 character generated passwords. None of them were identical.
MalwareBytes, at the time, found some malware and removed it. However, today, my Twitch account was banned indefinitely due to no cause of my own. I am concerned that my computer is still compromised and require assistance to ensure it's secure and this will not continue to happen.
Attached is my FRST.txt and Addition.txt
Any assistance here would be greatly appreciated.
-
The offline installer did the trick.
-
-
I've been getting the yellow banners to upgrade to a new version of Malwarebytes, but when I do, the install stalls on this screen (for hours) http://puu.sh/EOulh/2aa76f1e92.png
I tried running Support Tool. It rebooted my machine then tried to update MB and it also stalled on the same screen.
I just ran the installer overnight (10+ hours) and it never completed... never got beyond the screenshot above.
I assuming this is an upgrade to MWB 4.0+ and it's been several weeks of trying to install this before reaching out here.
Accounts keep getting hacked/compromised
in Resolved Malware Removal Logs
Posted
Hey,
I was leery about doing an in-place repair because of all the warnings in the process. I continued to search for a solution and finally stumbled upon this, which fixed it: https://community.brave.com/t/right-click-win11-taskbar-context-menu-doesnt-show-up/459607/5
I am not sure if this was changed in our diag/changes in this thread or if this was changed on my PC around the same time. Either way, I have had no additional compromises in my accounts since this thread started.
I appreciate your assistance here and I assume that this thread can now be closed. Are there any additional "closing" tasks to perform?